Tools

Kubernetes operator for llama.cpp-native LLM inference with GPU scheduling, Apple Silicon Metal support, and OpenAI-compatible API.

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

Secure, Fast, and Extensible Sandbox runtime for AI agents.

⚡ LFK is a lightning-fast, keyboard-focused, yazi-inspired terminal user interface for navigating and managing Kubernetes clusters. Built for speed and efficiency, it brings a three-column Miller columns layout with an owner-based resource hierarchy to your terminal.

MCP Server for kubernetes management commands

The Cloud Native Application Proxy

Real-time monitoring for Proxmox, Docker, and Kubernetes with AI-powered insights, smart alerts, and a beautiful unified dashboard

Distributed reliable key-value store for the most critical data of a distributed system

VictoriaMetrics: fast, cost-effective monitoring solution and time series database

Pulumi - Infrastructure as Code in any programming language

Realtime log viewer for containers. Supports Docker, Swarm and K8s.

Monitor everything with a single container

A docker-powered PaaS that helps you build and manage the lifecycle of applications

PostgreSQL backup tool (with MySQL\MariaDB and MongoDB support)

The authentication glue you need.

Workflow Engine for Kubernetes

Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.

Start your containers on demand, shut them down automatically when there's no activity. Docker, Docker Swarm Mode and Kubernetes compatible.

YugabyteDB - the cloud native distributed SQL database for mission-critical applications.

A cloud-native Pipeline resource.

Yet another docker registry UI

Podman: A tool for managing OCI containers and pods.

Parseable is an observability datalake built from first principles.

Orchestration engine that enables the deployment, integration and lifecycle management of applications at any scale, on any infrastructure (Kubernetes or otherwise).

SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables, designed to handle billions of files with O(1) disk access and effortless horizontal scaling.

🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.

Built-in MCP server for ArcadeDB, a multi-model database (graph, document, key-value, time-series, vector) with SQL, Cypher, Gremlin, and MongoDB QL support.

Access your entire server infrastructure from your local desktop

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments)

Open-source and next-generation Web Application Firewall (WAF)

powerful Kubernetes MCP server with additional support for OpenShift. Besides providing CRUD operations for **any** Kubernetes resource, this server provides specialized tools to interact with your cluster.

Declaratively deploy your Kubernetes manifests, Kustomize configs, and Charts as Helm releases. Generate all-in-one manifests for use with ArgoCD.

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

A Kubernetes controller and tool for one-way encrypted Secrets

Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software

The fastest path to AI-powered full stack observability, even for lean teams.

Progressive Delivery for Kubernetes

The easiest, and most secure way to access and protect all of your infrastructure.

The Kubernetes Package Manager

Open source workspace server and cloud IDE.

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

Fast and scalable open source API Gateway. Out of the box, Tyk offers an API Management Platform with an API Gateway, API Analytics, Developer Portal and API Management Dashboard.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

An open source trusted cloud native registry project that stores, signs, and scans content.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Lightweight SIP proxy, location server, and registrar for a reliable and scalable SIP infrastructure.

Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.

Simple and minimalist forward auth service intended for use with reverse proxies (Traefik, Caddy, nginx, etc)